84cf73d11dd7a529f1d54fab5467d32b89032b53fbcdd367930cbb167e559592

Sharing

Copy URL Twitter E-mail

General

Target
84cf73d11dd7a529f1d54fab5467d32b89032b53fbcdd367930cbb167e559592
Size 2.6MB
Sample260507-ld8ssset8n
SHA256 84cf73d11dd7a529f1d54fab5467d32b89032b53fbcdd367930cbb167e559592
MD5 63408df159379fea4e0dcce3e4658fe6
SHA1 cf67da1c9b7b5b3dfb1ff47b9bbf8eed42782f23
SHA512 bddf83dbf1b660d22ec0f7e2bc177fb0a7d4e4314086fe1c20c551045923b4d783b14b942e54377759f47276d140dda4a55a6489ecd605cd3d01a68e81b16fa3
SSDEEP 24576:AoI442xAyWro5XZ34EkXqWiPe9Dj75iXxxuXQizmZxmQC+moPKDorsIosCjZk3po:8mWQ3JFbPe9DjeZBEOKuosMZup4
TLSH
T1F8C5A32AF608B828CC3397B50DEBD75DFA240A1B570237067FC96E597804AAD5F6D2C4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
84cf73d11dd7a529f1d54fab5467d32b89032b53fbcdd367930cbb167e559592

File Explorer

84cf73d11dd7a529f1d54fab5467d32b89032b53fbcdd367930cbb167e559592

.exe 2.6MB

84cf73d11dd7a529f1d54fab5467d32b89032b53fbcdd367930cbb167e559592

IMPHASH f572c53c24b4a5fe0f8956e730a3d89a
SHA256 84cf73d11dd7a529f1d54fab5467d32b89032b53fbcdd367930cbb167e559592
MD5 63408df159379fea4e0dcce3e4658fe6
SHA1 cf67da1c9b7b5b3dfb1ff47b9bbf8eed42782f23
SHA512 bddf83dbf1b660d22ec0f7e2bc177fb0a7d4e4314086fe1c20c551045923b4d783b14b942e54377759f47276d140dda4a55a6489ecd605cd3d01a68e81b16fa3
SSDEEP 24576:AoI442xAyWro5XZ34EkXqWiPe9Dj75iXxxuXQizmZxmQC+moPKDorsIosCjZk3po:8mWQ3JFbPe9DjeZBEOKuosMZup4
TLSH
T1F8C5A32AF608B828CC3397B50DEBD75DFA240A1B570237067FC96E597804AAD5F6D2C4
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

179372

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Z:\openhsp3.7\src-GBK-20251116\hsp3\win32gui\hsprt\hsp3.pdb

comctl32

_TrackMouseEvent ord17

kernel32

GetProcessHeap FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCPInfo GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW CreateDirectoryW HeapReAlloc DecodePointer GetFileSizeEx GetConsoleOutputCP CloseHandle ReadConsoleW GetConsoleMode SetFilePointerEx GetFileType EnumSystemLocalesW GetUserDefaultLCID IsValidLocale MultiByteToWideChar VirtualProtect InitializeCriticalSectionEx FlsFree FlsSetValue FlsGetValue FlsAlloc HeapAlloc HeapFree WriteFile GetStdHandle GetModuleFileNameW GetModuleHandleExW ExitProcess GetCurrentDirectoryW SetCurrentDirectoryW SetEnvironmentVariableW ReadFile GetFullPathNameW GetDriveTypeW LoadLibraryExW SetStdHandle GetStringTypeW CreateFileW FlushFileBuffers HeapSize SetEndOfFile GetLocalTime DeleteFileA GetLastError FindClose FindNextFileA FindFirstFileA GetShortPathNameA MulDiv GlobalUnlock GlobalLock GlobalFree GlobalAlloc GetComputerNameA GlobalMemoryStatus WinExec GetWindowsDirectoryA GetSystemInfo GetSystemDirectoryA GetCommandLineA GetVersion FreeLibrary LoadLibraryA GetProcAddress GetTickCount Sleep GetModuleFileNameA LCMapStringW WideCharToMultiByte GetLocaleInfoW TlsFree TlsSetValue TlsGetValue TlsAlloc WriteConsoleW InitializeCriticalSectionAndSpinCount DeleteCriticalSection LeaveCriticalSection EnterCriticalSection EncodePointer SetLastError RaiseException RtlUnwind TerminateProcess GetCurrentProcess InitializeSListHead GetSystemTimeAsFileTime GetCurrentThreadId GetCurrentProcessId QueryPerformanceCounter GetModuleHandleW GetStartupInfoW SetUnhandledExceptionFilter UnhandledExceptionFilter IsDebuggerPresent IsProcessorFeaturePresent SleepConditionVariableSRW WakeAllConditionVariable AcquireSRWLockExclusive ReleaseSRWLockExclusive

user32

GetSystemMetrics ReleaseDC DestroyWindow GetCursorPos SendMessageA ShowCursor EnumDisplaySettingsA MessageBoxA ChangeDisplaySettingsA GetAsyncKeyState GetDC CreateWindowExA SetCursorPos ShowWindow SetActiveWindow AdjustWindowRectEx LoadCursorA FillRect GetActiveWindow GetSysColor MoveWindow TabbedTextOutA RegisterClassA DefWindowProcA LoadIconA UnregisterClassA PostQuitMessage InvalidateRect BeginPaint EndPaint GetFocus InflateRect PostMessageA GetClassLongA GetDlgItemTextA DrawTextA SetWindowLongA GetDlgCtrlID CallWindowProcA GetWindowLongA SetWindowTextA DrawFocusRect IsWindowEnabled IsDlgButtonChecked SetFocus SetClassLongA GetClientRect EnableWindow GetMessageA DispatchMessageA MsgWaitForMultipleObjects MapVirtualKeyA TranslateMessage PeekMessageA FindWindowA GetWindowRect SetWindowPos

gdi32

CreateDIBSection GetTextExtentPoint32A SetDIBColorTable CreateCompatibleDC SetPixel StretchBlt RealizePalette GetPixel DeleteDC LineTo SelectPalette CreatePen Rectangle CreatePalette MoveToEx SetBkColor Ellipse SetStretchBltMode GetTextMetricsA BitBlt SelectObject GetStockObject SetTextColor SetBkMode CreateFontIndirectA DeleteObject CreateSolidBrush GetDeviceCaps

comdlg32

GetSaveFileNameA GetOpenFileNameA ChooseColorA

advapi32

GetUserNameA

shell32

SHGetSpecialFolderPathA ShellExecuteA ShellExecuteExA

ole32

CoInitializeEx CreateStreamOnHGlobal OleInitialize CoUninitialize OleUninitialize IIDFromString CLSIDFromProgID CoCreateInstance

oleaut32

SysAllocString VariantClear SafeArrayAccessData SafeArrayCreate SafeArrayUnaccessData VariantInit SafeArrayGetDim OleLoadPicture SafeArrayGetElement SafeArrayCopy SafeArrayPutElement SafeArrayGetUBound SafeArrayGetLBound VariantCopyInd SysFreeString SafeArrayGetVartype SysAllocStringByteLen VariantCopy VariantChangeType

msimg32

GradientFill

winmm

timeEndPeriod timeGetTime timeBeginPeriod sndPlaySoundA mciSendStringA timeGetDevCaps

Sharing

General

Malware Config

Signatures

File Explorer

84cf73d11dd7a529f1d54fab5467d32b89032b53fbcdd367930cbb167e559592

comctl32

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

msimg32

winmm

generic